http://cr.yp.to/talks.html#2009.08.11 http://cr.yp.to/talks.html#2009.08.11 Downsides of DNSSEC are pretty well known, actually. If you're worried about secur

http://cr.yp.to/talks.html#2009.08.11 http://cr.yp.to/talks.html#2009.08.11 Downsides of DNSSEC are pretty well known, actually. If you're worried about security yet still want to use a third-party DNS resolver, might much better off with OpenDNS.com and their DNSCurve client (called DNSCrypt), which encrypts and authenticates all communications. http://blog.opendns.com/2010/02/23/opendns-dnscurve/ http://blog.opendns.com/2010/02/23/opendns-dnscurve/ http://www.opendns.com/about/innovations/dnscrypt/ http://www.opendns.com/about/innovations/dnscrypt/